Privacy and Data Protection Policy
Effective Date: 01 November 2024
Last Updated: 01 November 2024
1. Introduction
LanguageWize (“we,” “us,” or “our”) values the privacy and data protection rights of our students, employees, and other users. This Privacy and Data Protection Policy explains how we collect, use, protect, and manage personal information in compliance with the EU’s General Data Protection Regulation (GDPR), South Africa’s Protection of Personal Information Act (POPIA), and applicable data protection laws worldwide.
By accessing our services, you agree to this Privacy and Data Protection Policy.
2. Information Collection and Use
2.1. Personal Data Collected
We may collect the following types of personal data to deliver our services effectively:
- Identification Information: Name, surname, and contact details (email address, phone number, country or origin, employment information).
- Academic and Learning Information: Learning preferences, course progress, and feedback.
- Financial Information: Payment details to process transactions securely.
2.2. Data Collection Methods
Personal data may be collected directly from individuals through:
- Registration on our platform
- Interaction with LanguageWize services
- Communication via email, chat, or phone
3. Purpose of Data Collection and Usage
The data collected will only be used for purposes related to LanguageWize services, including:
- Personalizing language training programs
- Facilitating payments and processing transactions
- Communicating with users about updates, courses, and other educational information
4. Lawful Basis for Processing Personal Data
In compliance with GDPR, POPIA, and relevant global laws, LanguageWize processes personal data based on the following legal grounds:
- Performance of Contract: Data processing is necessary to fulfil our obligations under a contract with our users.
- Consent: Where applicable, we obtain explicit consent to process personal data.
- Legitimate Interest: We process data for legitimate business interests, such as improving our services, provided this does not override individuals’ privacy rights.
5. Data Security and Protection Measures
We implement industry-standard security measures to ensure personal data protection against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Data encryption for sensitive information
- Regular security audits and assessments
- Limited access to personal data based on employee roles
6. International Data Transfers
LanguageWize may transfer personal data to locations outside the European Economic Area (EEA). In such cases, we ensure an adequate level of data protection by:
- Using approved data transfer mechanisms, such as the Standard Contractual Clauses (SCCs)
- Implementing equivalent security measures for data storage and processing
7. User Rights
Depending on your location, you may have the following rights under applicable data protection laws:
- Right of Access: Request access to your personal data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of personal data when it is no longer necessary for the purposes it was collected.
- Right to Data Portability: Request transfer of your data to another service provider.
- Right to Object and Restrict Processing: Object to or request restrictions on the processing of your personal data.
For any data requests, please contact our Data Protection Officer at johan@graphical.co.za.
8. Data Retention Policy
LanguageWize retains personal data only for as long as necessary to fulfil the purposes outlined in this policy. Upon the end of a retention period, data is securely deleted or anonymized, in accordance with our data retention schedule.
9. Third-Party Data Sharing and Confidentiality
LanguageWize does not sell, trade, or disclose personal data to third parties for marketing or unrelated business purposes. We may share information:
- With trusted service providers who assist in operations, subject to confidentiality obligations.
- To comply with legal requirements, including responding to authorized public authorities.
10. Data Breach Notification
In the event of a data breach, LanguageWize commits to promptly assess the situation and notify the relevant data protection authorities and affected individuals in accordance with GDPR, POPIA, and other applicable laws.
11. Dispute Resolution and Legal Jurisdiction
Any disputes arising from this Privacy and Data Protection Policy shall be subject to South African law, and legal action will take place within the jurisdiction of South Africa.
12. Policy Updates and Revisions
This Privacy and Data Protection Policy may be updated periodically to reflect changes in our practices, legal requirements, or regulatory guidance. Users are encouraged to review this policy regularly for the latest updates.